FairCheck Privacy Policy
Effective date: October 16, 2026 · Draft
This Privacy Policy explains how MintSoft (Seoul, Republic of Korea; "we", "us") handles personal information when you use FairCheck — the website at faircheck.app and the FairCheck mobile apps (the "Service"). MintSoft is the controller of your personal information. Questions: app@mint-soft.com.
1. Information we collect
Account and profile
- Email address and sign-in provider (Google, Apple or email). With Google or Apple sign-in we receive your email address and, if provided, your name from that provider. If you choose Apple's "Hide My Email", we receive a relay address.
- Password (email sign-in only) — stored by our authentication provider as a one-way hash; we never see it.
- Nickname, country, preferred language (locale), optional profile photo, and the time you agreed to the Terms.
What you post and do
- Posts: amount, currency, country, category, description, tags, photos, and whether it is "I bought" or "Should I buy?".
- Votes, replies, bookmarks and reports (including the reason you give).
- Private price checks (app): amount, currency, country, category, description and photos.
- Inquiries you send us: name, email, subject and message.
Device and technical data
- Push notification token, device identifier generated by the app, platform and language, and your notification settings (app).
- Advertising identifiers (such as Google's advertising ID or Apple's IDFA, where permitted) and consent choices collected through Google's consent tool (UMP), used by Google AdMob in the app.
- Service usage records: the dates you used the website or app while signed in, the device type (web, iOS or Android) and the app version.
- Server logs kept by our hosting providers: IP address, browser/app type, pages requested, time and errors.
- Your approximate country, guessed from your IP address (via our hosting provider) or your browser language. We store only the country code in a cookie; we do not store your IP address for this.
Stored on your device (web)
- Cookies: chosen language (`NEXT_LOCALE`), chosen country (`fc_country`), guessed country (`fc_geo`, 1 day) and display currency (`fc_currency`).
- Local storage: your sign-in session, theme, and short-lived caches of public data (categories, trending tags, exchange rates) and of lists you have scrolled.
- Google Analytics cookies (`_ga`, `_ga_*`, up to 2 years) — see "Analytics" below. We do not use advertising cookies on the website.
Analytics. The website uses Google Analytics 4 to measure visits (pages viewed, time on page, approximate region, device and browser type, referral source). Google uses your IP address only to estimate location and does not store it. In the EEA, UK and Switzerland, analytics cookies stay off until you consent (Google Consent Mode) and only cookieless, aggregated signals are sent. You can opt out in your browser settings or with the Google Analytics opt-out add-on. If analytics or crash reporting (for example Firebase) is enabled in the app, it collects app usage and crash data linked to a device identifier, and this policy will list it.
Similar products (affiliate links). Post pages and price check results show similar products. To find them we send the product search keywords that AI extracts from the post, plus your country, language and currency, to affiliate shopping partners (no account information). When you tap a product we record the shop, post, country, a product identifier (hash), time, and your member ID if you are signed in. To prevent abuse, your IP address is used for request counting for up to 2 hours. What happens on the shop's site or app after you tap (cookies, purchases) is governed by that shop's privacy policy.
2. Why we use it
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Creating and running your account, signing you in | Account and profile | Contract |
| Publishing your posts, votes and replies; showing results, bookmarks and notifications | What you post and do | Contract |
| AI price estimates for your posts and private price checks; extracting product search keywords | Post or price check content and photos | Contract; legitimate interest |
| AI translation of posts and replies (when requested) | The text being translated | Contract |
| Showing similar products and recording affiliate clicks | Search keywords, country/language/currency, click records | Legitimate interest |
| Website visit statistics | Analytics cookies, device and browser data | Consent (EEA/UK/CH); legitimate interest elsewhere |
| Push notifications | Push token, settings | Consent (where required) |
| Ads in the app | Advertising identifiers, consent choices | Consent (EEA/UK/CH); legitimate interest elsewhere |
| Safety: handling reports, hiding content, preventing abuse and fraud | Content, reports, logs | Legitimate interest; legal obligation |
| Answering inquiries | Inquiry details | Contract; legitimate interest |
| Usage statistics (such as return rates) and improving the Service | Service usage records | Legitimate interest |
| Security, debugging and improving the Service | Logs, technical data | Legitimate interest |
| Complying with law | As required | Legal obligation |
We do not sell your personal information.
3. AI-generated price estimates and translations
FairCheck uses generative AI to estimate a typical price range for posts and private price checks. When you create a post or a price check, its amount, currency, country, category, description and up to three photos, together with comparable public posts (without author information), are sent to Anthropic (Claude API) to produce the estimate. Your account email and nickname are not sent.
The same request also extracts product search keywords used to find similar products.
When you tap See translation on a post or reply (or turn on auto-translate, including in the feed), that post's or reply's text is sent to Anthropic to be translated. Translations are stored in the Service so the same text isn't translated twice, and are deleted together with the original. When you search while signed in, your search query is sent to Anthropic to be translated into English so posts written in other languages can be found; the result is stored for 30 days.
When you tap Fill price from photo while writing a post, the one receipt or price-tag photo you choose is sent to Anthropic to read the item, amounts, quantity and currency into the form. We do not store or log that photo or the values read from it (only usage for cost accounting), and unless you turn on "Also post the photo", the photo is deleted right after it is read (any photo that could not be deleted is removed automatically within a day). Card numbers, names and phone numbers are not copied into the form. Please cover personal details visible in the photo before taking it.
AI estimates and translations are labeled as AI-generated in the Service and are reference information only. Under Anthropic's commercial terms, these inputs are not used to train its models, and Anthropic keeps them only for a limited period for safety and operations. We provide this notice in accordance with the Framework Act on the Development of Artificial Intelligence of Korea and similar transparency rules.
4. Who we share it with
Other users and the public. Your nickname, country, posts, photos, replies and vote totals are public. Your votes are counted but not shown with your name. Your email address is never shown.
Service providers (processors) that process data on our behalf:
| Provider | What they do | Data | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, server functions | All Service data | USA / hosting region of our project |
| Vercel, Inc. | Website hosting and delivery | Logs, requests | USA and global edge network |
| Google LLC | Google sign-in, Firebase Cloud Messaging (push), AdMob and UMP (ads and consent) | Sign-in data, push token, advertising identifiers | USA and other countries |
| Apple Inc. | Sign in with Apple, push delivery on iOS | Sign-in data, push token | USA and other countries |
| Anthropic, PBC | AI price estimates, product keyword extraction, translation (including search queries), receipt and price-tag auto-fill | Post / price check / reply content and photos, search queries, receipt or price-tag photos chosen for auto-fill | USA |
| Google LLC (Google Analytics) | Website visit statistics | Analytics cookies, device and browser data, approximate location | USA and other countries |
Exchange rates are fetched by our servers from ExchangeRate-API; no personal information is sent to it.
Affiliate shopping partners. To find similar products, our servers send product search keywords and your country, language and currency to these partners' affiliate APIs (no personally identifying information). When you tap a product you go to that shop, and its own privacy policy applies from there. We may earn a commission from purchases.
| Partner | Shown to | Location |
|---|---|---|
| Coupang (Coupang Partners) | Korea | Korea |
| AliExpress (Alibaba) | Outside Korea, and in Korea when Coupang has no results | Singapore, China and other countries |
| Amazon (Associates) | Planned | USA and other countries |
Legal reasons. We may disclose information when required by law, court order or a lawful request from authorities, or to protect the rights and safety of users and the public.
5. International transfers
MintSoft is based in Korea, and the providers above process data in the United States and other countries. When you sign up, your information is transferred over encrypted connections to these providers as you use the Service, and kept for the periods in section 6. Where required (for example under the GDPR), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification. You can refuse the transfer by not using the Service or by deleting your account; the Service cannot work without it.
6. How long we keep it
- Until you delete it or your account. Account, profile, posts, replies, votes, bookmarks, reports, notifications, devices, price checks and AI estimates. Deleting your account deletes all of these, including your photos. Deleted photos are removed from storage by a scheduled cleanup, usually within a day.
- Deleted posts and replies are removed immediately; their photos follow the same cleanup.
- Inquiries: up to 3 years after they are answered, to handle follow-up questions and disputes.
- AI translations: until the original is deleted.
- Affiliate click records: kept for statistics; deleting your account removes the link to your member ID. IP addresses used for request counting are deleted within 2 hours (translation requests are cleared hourly).
- Service usage records (visit dates, device type, app version): 400 days; deleted with your account.
- Push delivery logs: 90 days.
- Google Analytics: retained by Google for 14 months.
- Access logs: 3 months (Protection of Communications Secrets Act of Korea), unless needed longer to investigate abuse.
- Backups: deleted data may remain in encrypted backups for a limited time (up to 30 days) until they are overwritten.
- Data we must keep by law is kept for the period the law requires.
7. Your rights and choices
Depending on where you live, you have the right to:
- access your information and get a copy (portability);
- correct it — you can edit your nickname, country and language in Settings;
- delete it — you can delete your account in Profile → Settings at any time;
- restrict or object to certain processing, and withdraw consent (for example for push notifications or personalized ads) at any time without affecting earlier processing;
- lodge a complaint with a supervisory authority.
Korea (PIPA). You may request access, correction, deletion or suspension of processing, and may file a report with the Personal Information Protection Commission (privacy.go.kr, 182) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).
EEA, UK and Switzerland (GDPR). You have the rights listed above. You can complain to the data protection authority where you live or work.
California (CCPA/CPRA). You have the right to know, delete and correct personal information, and to opt out of its "sale" or "sharing". We do not sell personal information. Advertising identifiers used by AdMob in the app may count as "sharing" for cross-context behavioral advertising; you can opt out through the app's privacy settings or your device's ad settings. We will not discriminate against you for exercising your rights.
To exercise a right, email app@mint-soft.com from the address on your account. We will respond within the period required by law (generally within 10 days in Korea and one month under the GDPR).
8. Children
The Service is not directed to children. You must be at least 14 years old (16 in the EEA and the UK, or older where local law requires). We do not knowingly collect information from younger children; if we learn that we have, we will delete it. Contact us if you believe a child has given us information.
9. Security
We use encrypted connections (HTTPS), access controls on the database (row-level security), one-way hashing of passwords by our authentication provider, and limited administrator access. No system is perfectly secure; please use a strong, unique password.
10. Changes to this policy
We will announce changes in the Service at least 7 days before they take effect (30 days for significant changes that affect your rights).
11. Contact
MintSoft · Seoul, Republic of Korea Privacy officer: MintSoft privacy team · app@mint-soft.com